Configure the BPDU Guard

You can enable or disable the BPDU guard on per port basis. The BPDU guard disables the port upon the BPDU reception on the port. The disablement effectively denies devices behind such ports from participation in the STP. After you disable a port, it must be manually re-enabled. By default, the BPDU guard is disabled.

1. Enter the interface configuration mode for the interface (0/1 in this example).

   TOR-1 SEFOS# configure terminal
   TOR-1 SEFOS(config)# interface extreme-ethernet 0/1
   TOR-1 SEFOS(config-if)#
   

2. Enable the BPDU guard on the port.

   TOR-1 SEFOS(config-if)# spanning-tree bpduguard enable
    
   PvrstBpduguard Enabled
    
   TOR-1 SEFOS(config-if)# end
   TOR-1 SEFOS#
   

3. Review the output for the BPDU guard on the port.

   TOR-1 SEFOS# show spanning-tree interface extreme-ethernet 0/1 bpduguard
    
   Bpdu Guard  is Enabled
   TOR-1 SEFOS#
   

4. Disable the BPDU guard on the interface.

   TOR-1 SEFOS# configure terminal
   TOR-1 SEFOS(config)# interface extreme-ethernet 0/1
   TOR-1 SEFOS(config-if)# no spanning-tree bpduguard
    
   PvrstBpduguard Disabled
    
   TOR-1 SEFOS(config-if)# end
   TOR-1 SEFOS#